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Abstract 

Formal robustness analysis of aircraft control upset prevention and recovery systems could play an important 
role in their validation and ultimate certification. Such systems developed for failure detection, identification, 
and reconfiguration, as well as upset recovery, need to be evaluated over broad regions of the flight envelope or 
under extreme flight conditions, and should include various sources of uncertainty. To apply formal robustness 
analysis, formulation of linear fractional transformation (LFT) models of complex parameter-dependent 
systems is required, which represent system uncertainty due to parameter uncertainty and actuator faults. 
This paper describes a detailed LFT model formulation procedure from the nonlinear model of a transport 
aircraft by using a preliminary LFT modeling software tool developed at the NASA Langley Research Center, 
which utilizes a matrix-based computational approach. The closed-loop system is evaluated over the entire 
flight envelope based on the generated LFT model which can cover nonlinear dynamics. The robustness 
analysis results of the closed-loop fault tolerant control system of a transport aircraft are presented. A 
reliable flight envelope (safe flight regime) is also calculated from the robust performance analysis results, 
over which the closed-loop system can achieve the desired performance of command tracking and failure 
detection. 
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Nomenclature 


a, V 
q, o 
q, 7 

Se, S s 

T, m 
c, c 7 


Angle of attack (rad), True airspeed, (m/sec). 

Pitch angle rate (rad/sec), Pitch angle (rad). 

Dynamic pressure (N/?n 2 ), Flight path angle (rad). 

Elevator deflection (deg), Stabilizer deflection (rad). 

Thrust (N), Total mass (kg). 

Mean chord length (m), Inertia coefficient, 1 /I yy (kg~ 1 m~ 2 ). 


aerodynamic coefficients 


C L 

C Lbaaic 

K a 

C m 

n 

^ntb„ jc 

C D Mach 


Total lift coefficient. 

Lift coefficient for the rigid airplane at zero stabilizer angle. 

Effective factor of the elevator. 

Pitch moment coefficient. 

Pitch moment coefficient for the rigid airplane at zero stabilizer angle. 
Drag coefficient at a fixed mach number. 


1 Introduction 


Aircraft loss-of-control accidents [1] comprise the largest and most fatal aircraft accident category across all 
civil transport classes, and can result from a large array of causal and contributing factors (e.g., system and 
component failures, control system impairment or damage, inclement weather, inappropriate pilot inputs, 
etc.) occurring either individually or in combination. Research [2-5] into the characterization of the aircraft 
loss-of-control phenomenon as well as loss-of-control prevention and recovery system technologies is being 
conducted by NASA as part of its Aviation Safety Program (AvSP). In Ref. [6], it is shown that loss-of- 
control events can involve flight beyond normal operating conditions. Moreover, these conditions are not 
well modeled in current transport simulations. Validation of both the mathematical models and the systems 
technologies for loss-of-control conditions is therefore highly nontrivial. 

Certification of loss-of-control prevention and recovery systems (including failure detection, identification, 
and reconfiguration as well as upset recovery subsystems) for an aircraft will require a comprehensive valida- 
tion process (integrating analysis, simulation, and experimental methods) to ensure the safety and reliability 
of these systems. Robustness analysis for systems with structured uncertainty could play an important role 
in this process. Robustness is a key issue in the performance of failure detection and accommodation sys- 
tems. Failure detection schemes can experience performance difficulties (such as false alarms) due to system 
uncertainties. Robustness of the control system can mask faults and failures and make the detection prob- 
lem more difficult. It is fairly common for integration of failure detection and accommodation systems to be 
problematic if they’re designed separately. Robustness analysis can also identify worst-case combinations of 
uncertainties, faults and failures for use in guided Monte Carlo simulation and/or experimental studies, and 
could provide real-time risk mitigation during high-risk flight testing. This type of testing will be conducted 
utilizing a dynamically scaled transport aircraft that has been developed at the NASA Langley Research 
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Center as part of the Airborne Subscale Transport Aircraft Research (AirSTAR) Testbed (see Refs. [4,5]). 
For an aircraft, robustness to nonlinear parameter variations over the flight envelope and at extreme flight 
conditions must also be considered. Ref. [7] provides an excellent treatment of applying robustness analysis 
methods to the clearance of flight control laws, and Ref. [3] provides a robustness analysis framework for 
failure detection and accommodation systems. Analytical robust control methods, such as the structured 
singular value (/i see Refs. [3,7]), require the formulation of a linear fractional transformation (LFT) model 
of the uncertain system. 

Formulation of the LFT model can be extremely difficult and time consuming, especially for aircraft 
problems involving parametric uncertainties (see Refs. [3,7-12]). In fact, the difficulty in formulating the 
uncertainty model in LFT form has been a key impediment to performing robustness analysis for these 
systems. Ref. [1] presents a numerical matrix-based modeling method and preliminary software tool for 
computing LFT models from a linear parameter varying (LPV) model of the system. This paper presents 
practical uses of LFT models in robustness analysis of the integrated fault tolerant control (IFTC) system 
for a Boeing 747-100/200 aircraft. 

In Ref. [13], the IFTC system of the aircraft is designed, which includes a fault tolerant control (FTC) 
law and fault detection and isolation (FDI) filters. In Ref. [13], the FTC law is designed as a control 
law to minimize command tracking errors under actuator fault occurrence and the FDI filter is designed 
based on an affine LPV model of the Boeing 747 aircraft to generate residual signals using the geometric 
approach [14]. Since the FDI filter is designed based on the open-loop dynamics, the closed-loop evaluation 
is required before implementing it. For the closed-loop evaluation over the entire flight envelope, an LFT 
model from the nonlinear dynamics model of the Boeing 747-100/200 aircraft [13] is developed in this paper. 
The variation of the nonlinear aircraft dynamics over the flight envelope are captured by the LFT model with 
the A block, which contains key parameters such as angle of attack and velocity. To apply the robustness 
analysis (/^-analysis) to the closed-loop evaluation, LTI FDI filters are extracted from the LPV-FDI filters 
using the Jacobian linearization method. This paper presents robust performance analysis of the IFTC 
system for the Boeing 747 aircraft and a reliable flight envelope (safe flight regime), in which the IFTC 
system achieves the desired performance of command tracking and failure detection. 

This paper contains the following sections. In Section 2, the LFT modeling algorithm of the matrix-based 
computational approach is briefly summarized. In Section 3, the analysis problem for the IFTC system of 
the aircraft presented in Ref. [13] is described. In Section 4, the LFT model of the longitudinal motion of 
the transport aircraft in Ref. [13] is developed, which can cover the nonlinear dynamics over the given flight 
envelope. In Section 5, a robustness analysis framework and analysis results are described, and in Section 6 
the results are summarized with conclusions. 


2 Numerical Parameter LFT Modeling Approach 

The matrix-based LFT modeling method presented in Refs. [1,3] is briefly summarized for completeness of 
this paper. Suppose the class of systems is described as 


X 


Mp) 

B(p) 


X 

_y_ 


C(p) 

D(p)_ 


u 
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where p € 7 Z m and m is the number of uncertain parameters. Assume that the matrices A{p), B{p), C(p) 
and D{p) are in multi- variable polynomial matrix form such as 


A{p) B{p) 
C{p) D(p) 


A 0 B 0 
C n D n 


fn 

+ £ 


At 

Ci 


B i 

D l 


Mp )» 


(2) 


where fi{p) is a multi- variable polynomial function and /„ is the total number of functions. 


The LFT model of the system of Eq. (1) to be solved is depicted in Fig. 1. The matrix A (p) contains the 



Figure 1: Block diagram of the LFT modeling problem 

system uncertainties, and can be represented as follows for parametric uncertainties. 

A(p) diag[<5i/ ni , <52-f n2 , , &mlnm] (3) 

p= ,s m ] en m ( 4 ) 

The LFT equation associated with Fig. 1 is given below 

S(p)=L(I-AP)~ 1 AR+Q = S a (p) + Q. (5) 

where the matrix S(p) is a compact representation of the system model. The matrix Q represents the 
nominal system model. The interconnection matrices P, R , and L are to be determined for the uncertain 
component of S, such as 

S A (p) = L{I-AP)~ 1 AR. (6) 

Eq. (6) can be solved for multivariate polynomial problems by replacing the matrix inversion with a finite 
series expansion and a nilpotency condition, 

S A (p) = LAR + L[AP + (A P) 2 + • • • + (AP) r ]AP (7) 

(AP) r+1 = 0 (8) 

where r is determined by the degree of the largest nonzero term in S A (p). 

The blocks of L and R , and the main-diagonal blocks of P are solved simultaneously for each uncertain 
parameter <5, and the off-diagonal blocks of P are each solved using the appropriate cross terms of S A (p). 
The detailed procedures are described in Refs. [1,3]. There are other available software tools developed by 
ONERA [15] and MuSyn. Inc [16], respectively. In this paper, the LFT models of the transport aircraft are 
obtained using the matrix-based LFT modeling method and the uncertainty model method provided in the 
Robust Toolbox in MATLAB, since the software tools by ONERA and MuSyn Inc. generate LFT models 
with the similar sized A block [1]. The comparison results of the LFT models are presented in subsection 
4 . 4 . 
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3 Analysis Problem on The IFTC System 


The IFTC system of the Boeing 747-100/200 aircraft presented in Ref. [13] is briefly described here to carry 
out detailed closed-loop evaluation of the system over the entire flight envelope. The IFTC system shown 
in Fig. 2 contains a fault tolerant control law, fault detection and isolation filters, actuators and sensors. 
In Ref. [13], the fault tolerant control law was designed as a passive fault tolerant control law minimizing 



Figure 2: The simplified block diagram of the IFTC system of a transport aircraft in Ref. [13]. 

flight-path angle and velocity command tracking errors under fault occurrence. Actuator faults are modeled 
as additive signals on each control channel. In Ref. [13], the LPV-FDI filters were designed, based on the 
affine LPV model of the longitudinal motion of the Boeing 747-100/200 aircraft as residual generators using 
the geometric approach [14]. 

To evaluate the IFTC system over the entire flight envelope, the IFTC system is augmented with per- 
formance weighing functions (W p and Wf), a fault scale matrix (F s ), and ideal closed-loop dynamics (Tj), 
as shown in Fig. 3. Note that the nonlinear aircraft dynamics in the augmented closed-loop system shown 
in Fig. 2 are replaced with the LFT model with the block A mo d e i(a, V). Recall that the LFT model with 
the block A mo dei has to capture the nonlinear dynamics over the entire flight envelope. The block A act 
shown in Fig. 3 represents unmodeled actuator dynamics. The augmented IFTC system is converted into 
the generalized block diagram shown in Fig. 4 with the uncertain block A = diag{A mo d e i , A oct }, which is 
useful for robustness analysis (/^-analysis) . 

For the closed-loop evaluation of the IFTC system, robust performance in an sense for the subsystems 
(M eci M e f , Mf c , and Mff) shown in Fig. 4 is interpreted as follows: 

1. g(M ec ): Robustness to command tracking errors in control performance over the entire flight envelope 
with/without the unmodeled actuator dynamics. 

2. n(Mff ): Robustness to fault detection errors in FDI filter performance over the entire flight envelope 
with/without the actuator unmodeled dynamics. 

3. Effect of faults on command tracking errors over the entire flight envelope. 

4. n(Mf c ): Effect of commands on fault detection errors over the entire flight envelope. 
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Figure 3: Augmented closed-loop interconnection block diagram of the IFTC system of a transport aircraft. 



cmds 

faults 


Figure 4: Generalized block diagram of the IFTC system with uncertainties. 


4 LFT Modeling of The Longitudinal Motion 


For the closed-loop evaluation over the entire flight region, it is important to develop a reliable LFT model 
which can represent the original nonlinear dynamics of the longitudinal motion. This section presents the 
detailed assumptions and procedures to reformulate the nonlinear equations of longitudinal motion into 
quasi-LPV form in Eq. (1). The nonlinear dynamic model of the longitudinal motion presented in Ref. [13] 
is summarized to develop an LPV model and an LFT model. 


4.1 High Fidelity Nonlinear Model 

The full nonlinear equations of the Boeing 747 longitudinal motion are taken from Ref. [13] over the up-and 
away flight regime: altitude h e € [3000, 12000] m, angle of attack a € [—2, 8] deg and total airspeed 

V € [150,280]. In this paper, the entire flight envelope is defined as the up-and-away flight regime. The 
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detailed nonlinear equations of motion are 


a 


[1 2 mV 2 (1-45 l-8x cg ) ^ q ]q+[ mV^ a< d5e^ e 

+ [— ^ 7 (sin a + 0.0436 cos a)]T + y (sin a. sin 9 + cos a cos 9)g — ^jyCL basic , 


(9) 


<7 


C7 |y C ^ 1(1-45 - 1. 8x c.g.)^ (cos ax c.g. +sin az c . g )]q 
+c 7 qScK a [^f- - |^f(cos ac c . g . + sin az c . g .)]<5 e 
+c 7 qScK a dCm ^’ M) ^ _j_ C7 S zeng T + c 7 qScC mbasic (a, M) 

+c 7 qS[C DMach (. M , Cl) (cos cxz c .g. - sin ax c . g .) - C Lbasic (ot w , M)(cosax c . g . + sina 2 c . g .)] 

4 — c 

V" = — (cos a — 0.0436 sin a)T + (sin a cos 6 — cos asin#)# — —Cd m h (M, Cl) 
m m 

e = q 

h e = (cos a sin 9 — sin a cos 9) V 


(10) 


( 11 ) 

(12) 

(13) 


Note that aerodynamic coefficients and their derivatives are calculated from the look-up tables described in 
Ref. [17]. Here, the thrust generated by four engines is described by “4T” using one variable and also the 
four elevators are described as one variable S e for simplicity. The full nonlinear motions are rewritten as an 
affine LPV model to generate LPV-FDI filters in Ref. [13]. The affine LPV model is described in the next 
section. 


4.2 Affine LPV Model of the Longitudinal Motion 

In Ref. [13], the affine LPV model is developed from the nonlinear equations of Eqs. (9)-(13) under the 
assumptions that each element in the nonlinear equation which has small variation over the flight envelope 
is considered as constant and the nine scheduling parameters are introduced to cover the nonlinear dynamics 
over the affine parameter space described by their vertex points. The nine scheduling parameters for the 
affine LPV model in Ref. [13] are 


Pi = q, P 2 = q/V, p 3 = 1/V, pa =7, P5 = C Lbasic q/V, 

dCn 


dC L q 

Pe = "JF T7 » P7 = C 'D 


,<7, P8= -J 7—9, P9 = Cm baeic q- 


dS e V ’ dS e 

Using the scheduling parameters, the full nonlinear equations are rewritten as 


(14) 

(15) 


OL — CL ai q Ct a2 p 3 S e T da 3 p 3 T -(- (ct a4 p 3 T &a b Pb)d fici 

q = (<UiPi + o- q2 p 7 )a + a q3 p 2 q + (a qi p 3 + a q5 pi)S e + a qe piS s + a qv T + (a qs pi + a q9 pg)5 fi c , 

V = av x T + ( civ 2 Pa + av 3 p 7 )dfic > (16) 

9 = q, 

he = PaV, 

where the a,; coefficients, written in Appendix A, are treated as constant parameters over the flight envelope. 
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Recall that the state vector is defined as x = [a q V 9 h e ] T and control is u = [<5 e , 6 S , T, 5fi C ] T in 
Ref. [13]. Note that there is a fictitious input Sfi C which is always defined as one in the simulations of the 
affine LPV model. Recall that when FDI filters are designed in Ref. [13], the LPV model should be affine to 
use geometric approach. In this paper, we convert the affine LPV model into a quasi-LPV model with two 
scheduling parameters, which is not affine. The affine LPV model of the Boeing 747 longitudinal model is 
rewritten as 

x = A(p)x + B(p)u (17) 

where 

9 9 

A{p) = Ao + Aipi, B{p) = Bq + BiPi. (18) 

i = 1 »= 1 

The detailed elements of A and B matrices are referred to Ref. [13]. 

The affine LPV model is developed for designing FDI filters not for analysis. The nine scheduling param- 
eters of the affine LPV model are treated as independent parameters in Ref. [13] to construct FDI filters. It 
is not applicable for robustness analysis since the nine scheduling parameters are physically dependent on 
each other. In order to remove the dependency and the fictitious input, the affine LPV model is rewritten in 
the nonlinear form under the assumptions that altitude variations are small enough to be ignored for level 
flight. 


4.3 Low Fidelity Nonlinear Model of the Transport Aircraft 


The aerodynamic coefficients are fitted as polynomial functions of angle of attack and velocity for level flight 
over the flight envelope. Here, the coefficients are rewritten as 


C D Ma ch 

— K 2 QCK + Kio« + ZvOlU + K 00 

(19) 

dCL 

dS e 

= T02V 2 + TqiV + Too 

(20) 

c Lba3io 

= VioO! + 1701 V + Poo 

(21) 

Cll Ibasic 

= ^ 20 « 2 + £l 0 « + £oiU + £00 

(22) 

dC m 

= C 02 U 2 + C 01 U + Coo 

(23) 


where the constant coefficients are 


K 20 

= 3.27, 

KlO 

= 3.48 x 10 -2 , 

KOI 

= 4.45 x 10" 5 , Koo = 9.92 x 10" 3 

T ~02 

= -1.44 x 10" 7 , 

T01 

= 4.26 x 10" 5 , 

Too 

= 3.21 x 10" 3 , 

mo 

= 5.15, 

V 01 

= 1.21 x 10" 3 , 

Voo 

= 6.15 x 10" 3 , 

£20 

= 2.39, 

£l0 

= -1.46, 

£01 

= -3.20 x 10" 4 , £00 = 0.12, 

C 02 

= 4.35 x 10" 7 , 

C 01 

= -1.16 x 10" 4 , 

Coo 

= -1.76 x 10" 2 . 


Using the fitted aerodynamic coefficients, the affine LPV model is rewritten as a nonlinear function of angle 
of attack and velocity. 



The longitudinal motion is rewritten as 


a 


a 


r - 


1 

5 

i 





$e 


0 

Q 

= A(a, V) 

q 

+ B(a,V) 

8s 

+ 

V 


V 


T_ 


0 

_e_ 


9 _ 




0 


where 


A (a,V) 


0.5pa a5 r/ lo V 




0.5pa a5 (r/ ol V + r/ 0 o ) 


0.5 pV( Clq 2 + (a qi + a q g^20 a + a qg Zio)V) 
— ay 2 + 0.5pV 2 av 3 (K2o& + «io) 

0 


0 - 5 / 99,3 v 
0 
1 


0-5p( a qs + a qg L£oi + a qg t;oo)V 
0.bpav 3 V(k 0 iV + k 00 ) 

0 



0.5pa Q2 ( 702 P 3 + t 0 iV 2 + Too V) 

0 

l 

CO 

3 

53 



II 

S' 

0.5p(a 94 (<Co2P 2 + C 01 L + £oo)L 2 + a qs V 2 ) 

0.5 pa qe V 2 

a q 7 


°e 

Ss 


0 

0 

av 1 


T 


0 

0 

0 



0 

0 


a v 2 


0 J 

(26) 


(27) 


It is observed that the system matrices of Eq. (25) are a function of only two parameters: angle of attack 
and velocity. Note that Eq. (25) is not in quasi-LPV form because of the term a ai /V. 


The dynamic model of Eq. (25) is called a low-fidelity nonlinear model, hereafter. For comparison with the 
high fidelity nonlinear model (hnl) of Section 4.1 and the low fidelity nonlinear model (lnl) developed here, 
the elevator doublet inputs are simulated. The difference comes from the fitted aerodynamic coefficients. 
Recall that the low fidelity nonlinear model contains polynomial fitted aerodynamic coefficients and in the 
high fidelity nonlinear model, aerodynamic coefficients are evaluated via linear interpolation from look-up 
tables in Ref. [13]. It is observed from Fig. 5 that the short period motions of the two models for t < 50 
sec are identical to each other and the phugoid motions (t > 50 sec) have some difference in time responses 
between two models. Hereafter, the low fidelity nonlinear motion is used to generate an LFT model for the 
Boeing 747 longitudinal motion. 


4.4 Quasi-LPV Model of The Aircraft 

The quasi-LPV model of the low fidelity nonlinear model in Eq. (25) is developed using the function substi- 
tution method [17 -20] to convert the term a ai /V into quasi-LPV form. The function substitution method 
has been used to reformulate nonlinear equations into quasi-LPV form [17, 18]. The benefit of the func- 
tion substitution method is that the generated LPV model can represent the nonlinear dynamics without 
linear approximation (such as Jacobian linearization) over the entire possible flight region (not like state 
transformation limitation [18]). 

To apply the function substitution method, states of the model are defined as the deviation from a 
reference point such as 

a = a-a tl V=V-V t , 9 = 9 - 6 U (28) 
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Figure 5: Time responses with elevator inputs for high and low fidelity nonlinear dynamics 


where a reference point is chosen as a trim point: (at, 0, Vt, 9t). Note that at = 9t for level flight under a 
trim condition. Using Eq. (28), Eq.(25) is rewritten as 

x = A(a,V)(x t + x) + B(a, V)(u t + u) + [a ai /V 0 0 0] T , ^ 

= A(a, V)x + B(a, V)u + h(a, V), 

where 

h(a,V) = A(a,V)x t + B(a,V)u t + [a a JV 0 0 0] T (30) 

Note that the control u is [5 e — 5 et S s — S St T — T t ] T and the trim value Ut is [5 et , S St , T t ] T . In this paper, 
the trim condition is set as [ a t , qt,V t , 9 t , h e ] = [0.7 (deg), 0, 232(m/sec), 0.7 (deg), 7000(m)], and 
[Se t , S at , T t ] = [2(deg), -0.06 (deg), 42991(iV)]. 

Define h(a, V) = [h a h q hy hg] T . Note that h(a, V ) can be explicitly written as function of a and V. 
For example, the first element h a of h(a, V ) is given by 

h a = 0.5p(a a5 r) lo a t V + a a5 (r/ 01 + p 0 o)V t + a a2 (T 02 V 2 + r 0 iU + T 00 )VS et ) + (a a3 T t + a ai )/V. (31) 

Using the approximation 1/U « ^(1 — V /V t ) and substituting V = V t + V, Eq. (31) is rewritten as 

K = (h - lr/V t 2 + 2l 2 Vt + 3 l 3 V 2 + (l 2 + 3 l 3 V t )(V - Vt) + 3 l 3 (V - V t ) 2 )V (32) 

where l\, l 2 , I 3 , and l r are shown in Appendix B. After some algebraic manipulations, Eq. (30) is rewritten 
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as 


where h av , h qa , h qv , h Va , 
aircraft in Ref. [13] is 



ha. 


0 

hav 



p 

ii 

hq 

— 

hq a 

hqv 


a 


hy 


hy a 

hy v 


V 


_he _ 


_ 0 

0 _ 



and hy v are written in Appendix B. Thus, the quasi-LPV model of the transport 
i = {A(a,V) + H(V)}x + B(a,V)u (34) 


where 


H(V) = 


0 0 
h qa ° 

hy a 0 
0 0 


hay ^ 

hq v 0 

hy v 0 
0 0 


(35) 


The quasi-LPV model with the two scheduling parameters (a, V) can be rewritten as 

i = AS: + Bu = ( ^2 ( A iJ + Hi,jWV j )x + {B r /V + ^ B ltj a i V j )u (36) 

i=0,j=0 i=0,j=0 

Component matrices Aij, Bij and Hi j are written in Appendix B. Note that this quasi-LPV model, Eq. (36), 
has no fictitious input. 

The Va and V 2 a terms appear in h q and hy, respectively. To decompose the terms into quasi-LPV form, 
we introduce parameters p\ and P 2 such that 


Va=\p 1 (V-V t ) (1 — Pi) (a 



(37) 


where 


V 2 a={p 2 (V -V t ) 2 (l-p 2 )(a 


a t )(V- V t )} 


a 

V 


0 < pi < 1, 0 < p 2 < 1 


(38) 


(39) 


The values of p\ and p 2 are chosen as one, respectively, for the quasi-LPV model to be stable at each fixed 
parameter value. Note that there are different sets of possible pi and p 2 values which make a quasi-LPV 
model stable. The effect of p\ and P 2 on LFT models is still unknown and is out of this paper’s scope. 


For comparison between the quasi-LPV model and the low fidelity nonlinear model of Eq. (25), time 
responses are simulated with the elevator input. The quasi-LPV model should exactly represent the low 
fidelity nonlinear model since the quasi-LPV model is developed by only algebraic manipulations without 
any approximation except 1/V w ^-(1 — V/V t ). It is observed from Fig. 6 that the time responses of both 
the LPV model with the scheduling parameters (a, V ) and the low fidelity nonlinear model are identical. 
The developed models of the Boeing 747 longitudinal motion are briefly summarized in Table 1. 
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Figure 6: Time responses with elevator inputs 


4.5 LFT Models of the Boeing 747-100/200 Aircraft 

Two LFT models are obtained from the quasi-LPV model in Eq. (34) using the numerical matrix-based LFT 
model tool (NT) [1] and the Robust toolbox (RT) in MATLAB, respectively. The LFT model generated 
by NT has the block A mo dei = diag{6 v Ie X 6, 5 Q } and the LFT model generated by RT has the block 
A model = diag{5 v l5 X 5, (5 q }. Recall that it is demonstrated in Ref. [1] that the two software tools can 
generate reliable LFT models which can represent the original nonlinear dynamics. In this paper, open-loop 
time simulations of two developed LFT models is omitted for the limited space. For comparison, the robust 
analysis results of the closed- loop system with each LFT model are presented in Section 5. 

In order to confirm that the developed LFT model is useful for the closed-loop evaluation of the Boeing 
747-100/200 aircraft, the closed-loop system is simulated with the LFT model instead of the nonlinear aircraft 
model (shown in Fig. 2). The 7 command used in the simulation is a square wave with 3 deg amplitude, 
starting at 20 s and ending at 95 s and the velocity command is a step signal starting at 25 s as seen in 
Fig. 7. The fault scenario applied in elevator and the throttle channel can be seen in residual plots of Fig. 8. 
Based on the simulation results shown in Figs. 7 and 8, the nonlinear aircraft model can be replaced with 
the developed LFT model. Hereafter, the developed LFT model is used for the IFTC closed-loop evaluation 
over the entire flight envelope. 
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Table 1: Summary of Models of the Boeing 747 longitudinal motion 


Model 

Comment 

High fidelity model [13] 

• Full nonlinear equation of motion using aerodynamic coefficients eval- 
uated from the look-up tables. 

Affine LPV model [13] 

• Assume that nine scheduling parameters are independent. 

• Assume small variations of parameters (a*) are constant over the flight 
envelope. 

• The fictitious input is set as one. 

Low fidelity model 

• Polynomial fitted aerodynamic coefficients are used. 

• Assume the parameters at are constant. 

• The fictitious input is not in the model. 

Quasi-LPV model 

• Accurate representation of the low fidelity nonlinear model under the 
approximation 1/V = ^(1 — V/V t ). 

• There are only two scheduling parameters (a, V). 

LFT model 

• Exact representation of the quasi-LPV model. 

• Using the numerical matrix-based LFT modeling tool or the Robust 
toolbox in MATLAB. 
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Figure 7 : 7 and V command time responses with high fidelity nonlinear (hnl) and the LFT models. 




Time (sec) 


Figure 8: Fault simulations with high fidelity nonlinear (hnl) and LFT models. 
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5 Analysis Results 


The closed-loop evaluation of the Boeing 747 aircraft defined in Section 3 is formulated into generalized /i 
problems shown in Fig. 4. Recall that the robust performance analysis is represented by the upper bounds 
of g values of each subsystem such as M ec : robust command tracking control performance, M e f. effect of 
commands on fault detection errors, Mf c : effect of faults on command tracking error, and Mff. robust fault 
detection errors with/ without the unmodeled actuator dynamics. 

The command tracking performance weighting function W p is defined as diag( ^/o^oos+i ^ ’ W s/o 005+1^ ) 
this analysis to allow the flight path angle and the velocity to track their commands in the 2.5% and 1 % 
error ranges, respectively, over the low frequency region. The fault scale matrix F s shown in Fig. 3 is set as 
diag(10 {deg), 100007V) to represent 10 deg and 10000 N faults in the elevator and the throttle channels, 
respectively. The fault detection weighting function Wf is chosen as diag) 0 ' 33 ^^ 333 ^ , ^ ) 

which represents about 3 deg and 500 N detection errors for 10 deg elevator fault and 10000 N throttle 
fault, respectively, over the low frequency range. The block Ti in Fig. 3 is for the ideal transfer function 
of 7 and V tracking. The block T) = diag{ s 2 +0 °/g% 35 2 , < 2 +0 0 3 g% 15 2 ) taken from Ref. [13] was used for 
designing the control law as the fault tolerant control shown in Fig. 3. The actuator models [13] are 
for the elevator actuator and 7777 for the throttle actuator. Here, the unmodeled actuator dynamics 

are defined as rfiaff( °'^QQ 0 | ] l 1 1 ' ) , ^a/soo+i^ ) to represent 10% unmodeled dynamics over the low frequency 
range (< 10 r/s ) and 500% over the high frequency range (> 500 r/s). The uncertainty associated with 
the unmodeled dynamics is defined as a complex number, A act = diag{ 8 \, 82 ) ,612 £ C- The sensor model is 
approximated as an ideal sensor for consistency with Ref. [13]. 

The ji upper bounds of each subsystem with/without unmodeled actuator dynamics are calculated using 
the Robust Toolbox and are plotted in Fig. 9. It is observed from Fig. 9 that the effect of the unmodeled 
dynamics on the g upper bounds is minor for each subsystem. The left top plots of Fig. 9 show that small 
performance degradation of command tracking is expected over the entire flight envelope since the maximum 
values of ji over the frequency range is about 1.3 without the A act block. Recall that the uncertain block 
A mo del is a function of a and V and contains the variations of the nonlinear dynamics over the flight envelope. 

The g upper bounds of M e f shown on the right top plots of Fig. 9 represent the robustness of fault effect 
on the command tracking error. The plots imply that faults do not affect on command tracking in this 
IFTC system. According to the top plots (left and right) in Fig. 9, it is observed that the designed 
control law can robustly achieve the desired command tracking performance with small degradation under 
fault occurrence over the entire flight envelope. 

The g upper bounds of Mff shown on the right bottom plots of Fig. 9 represent the robustness of fault 
detection errors by the FDI filters. The plots imply that the FDI filter can detect 10 deg elevator and 10000 
N throttle faults in the error range defined by Wf over the flight envelope with zero commands (7 C md = 0, 
V cm d = 0). The g upper bounds of Mf c shown on the left bottom plots of Fig. 9 represent the robustness 
of command effect on the fault detection errors. The plots imply that the command signals can affect fault 
detection errors over the flight envelope. Recall that the 7 and V command sizes are 15 deg and 10 m/sec, 
respectively. For comparison, we set 7 and V command sizes: 1) 1 deg 7 and 1 m/sec velocity commands 
(lglV), 2) 2 deg 7 and 2 m/sec velocity commands (2g2V) , 3) 5 deg 7 and 5 m/sec velocity commands 
(5g5V) and 4) 15 deg 7 and 10 m/sec velocity commands (15glOV). The g upper bounds for each case are 
calculated and are shown in Fig. 10. It is observed from Fig. 10 that smaller 7 and V commands decrease 
the g upper bounds. From the bottom plots (right and left) of Fig 9 and Fig. 10, it is noticed that the 
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Figure 9: The upper bounds of /i values for each subsystem with/without the unmodeled actuator dynamics. 


LTI-FDI filter can robustly detect faults under the condition that 7 and V command sizes are small. Recall 
that the FDI filters designed in Ref. [13] are the LPV filters not LTI filters. The LPV filters may have more 
robustness and less coupling effects of the commands since the filter gains can be adjusted as angle of attack 
and velocity change. 

Now, we can calculate a flight regime in which each subsystem can robustly achieve the desired performance 
under fault occurrence. This flight region, called a reliable flight envelope (£), is calculated as 

£(a,V) = {(a,V) \ \\A model (a, P)|U < (40) 

IIlcLXk; flyjJj 

where jl is the upper bound of ^ and to is frequency. Each reliable flight envelope is shown in Fig. 11. The 
cross symbol in Fig. 11 is the reference point (trim point) for the LFT model. 
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Figure 10: The /r upper bounds of Mf c with different sizes of 7 and V commands. 
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Figure 11: The reliable flight regime for each subsystem. 
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Recall that the calculated reliable flight regime is dependent on the pre-defined weighting functions W pi 
Wf,F s and T). When performance weighting functions are relaxed, the size of reliable flight regimes increase. 

Robust Command Tracking Performance (M c ) Effect of faults (M fc ) 






Figure 12: The \i upper bound values of subsystems based on LFT models developed by the NASA Tool 
(NT) and the Robust tool (RT) in MATLAB 

In this paper, the two LFT models are developed using the numerical matrix-based LFT modeling tool 
(NT) and the Robust toolbox (RT), respectively. Fig. 12 shows the robust performance analysis results using 
each LFT model. It is observed that the robust performance analysis results are very similar to each other. 

In this analysis framework, the LFT model of the aircraft nonlinear dynamics is generated by the function 
substitution method, in which a reference point is chosen as one of trim points. Generally, the LFT model 
is dependent on the choice of a reference point. For comparison, another LFT model is generated with a 
different trim point. The analysis results using the LFT model are very similar to the results shown in 
Fig. 9. The detailed plots are omitted for space limitation. In this analysis framework, the control law and 
the FDI filter are LTI systems. The IFTC system presented in Ref. [13] has an LPV-FDI filter. Recall that 
the LTI-FDI filter is extracted from the LPV-FDI filter using the Jacobian linearization method around the 
trim point. The robust analysis results of the IFTC system with the LPV FDI filter would be different from 
the analysis results presented in this paper because of linearization of the filter. For a further research, an 
IFTC system with LPV-FDI filters will be considered in robustness analysis of the closed-loop system. In 
the robustness analysis framework, actuator failure effects will be considered in calculating a reliable flight 
region. In addition, the worst flight condition for the closed-loop system will be calculated, based on actuator 
fault models represented as LFT models. 
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6 Conclusion 


In this paper, the closed-loop evaluation of the IFTC system is formulated into the generalized fi analysis 
problem using the LFT model that covers the nonlinear dynamics of the aircraft over the entire flight regime. 
The LFT model is developed from the parameterized system(quasi-LPV model) generated by using the func- 
tion substitution method. The detailed procedure of LFT modeling of the aircraft nonlinear dynamics is 
presented in this paper. Using the well-developed /r analysis method, the robustness of command tracking 
error, command effect on fault detection errors, fault effect on command tracking error, and fault detec- 
tion error are calculated as n upper bounds over the flight envelope with/ without the actuator unmodeled 
dynamics. Using the presented analysis framework, the IFTC system of the transport aircraft is analyzed. 
Based on the analysis results, the flight envelope is calculated over which the closed-loop system can achieve 
the desired performance of each subsystem. 


Appendix A 


The constant cq coefficients of Eq. (16) are 

a ai = 1- ^ (1-45 -I-Sxcg)^ 
a «2 = -(S/m)K a 

a as = —(4/m) (sin a + 0.0436 cos a) 

a ai = (sin a sin 9 + cos a cos 9)g 
a« 5 = —(S/m) 


a qi 

= -c 7 SCL c 

Y^Cc.g. 

a q2 

= C 7 < Sx c _g 


Clq 3 

= 0.5c7 Sc 2 ( 

dCm _ 1 
dq c 

a q 4 

= c 7 ScK a 


a qa 

= —c 7 Scx c ., 

dC L 
9- d5 e 

a q& 

— c 7 ScK a dg ^ 

a q 7 

= c 7 s z Bng 


a qs 

= ~c 7 SC Lo 

X c .g. 

a q9 

= c 7 Sc 



av i = 

to ( c°s a 


ay 2 = 

-9 


°v 3 = 

-(S/m) 


(1A5-I.8x c . g .)^x c . g .) 


— 0.0436 sin a)4 


(41) 


(42) 


(43) 
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Appendix B 


The element of H(V) in Eq. (35) is as follows: 

hay — h a y 0 T h a y 1 V T h a y 2 V 

hq a = k 2 lV 2 

hq v = h q y 0 + h q v 1 V + h q y 2 V~ + hqV 3 V 3 

h Va = C 21 V 2 

h Vv = hy v 0 + hwi V 


Each coefficient in Eq. (44) can be written as function of the trim values. 

h a v 0 = h — Ir /V 2 + l 2 V t + I 3 V 2 
haVx = l 2 + h Vt 

haV 2 = h 


where 


h q v 0 = k 2 iV t a t + k^V 3 + k^V 2 + k 2 oVt + fcio 

h q v 1 = k 2 ±at + kioV 2 + k^oVt + k 2 o 

k q v 2 = k^oVt + kzo 

h q y 3 = /C40 

hvv 0 = C21 Vtat + C 20 V t + C10 

hyv 1 — c 2 \a t + C 2 q 

l r d(x 4 

I3 = 0 .5pa a2 S et T 02 

l 2 — 0.5pa Q2 (5e t Toi 
h = 0.5 p{ a a2^e t ffio + (vw o-t + VoiVt)) 

k 21 = 0.5pa qg £ 2O at 

ki 10 = 0-5paq 4 ( O2 5 et 

fc 30 = 0.5pa 94 Coi^e t 

k 2 0 = 0-5p(a qi at + dqg^ioat + a qo £,oiVt + a q4 Coode t + a 95 <5 et + a qe 5 St ) 
kio = 0.5 p{a q2 a t + a qs V t + a q9 (,ooV t ) 


C 2 i = 0.5patay 3 K2o 

C20 = 0.5pav 3 (K W a t + K 0 iV t ) 

C w = 0.5pa V 3 K OO V t 


(44) 


(45) 


(46) 


(47) 


(48) 


(49) 


(50) 
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The system matrices Ay, Bij, and H, :j of Eq. (36) are 


H 00 = 


0 

0 

A Vo 

0 


0 

0 

haVi 

0 

0 

0 

hqVo 

0 

? — 

0 

0 

hqV i 

0 

0 

0 

hvvo 

0 


0 

0 

hvv i 

0 

_0 

0 

0 

0_ 


_0 

0 

0 

0_ 


(51) 


#02 = 


0 

0 

haV \ 2 

0 


0 

0 

0 

0 

&21 

0 

hqy 2 

0 

> #03 — 

0 

0 

hqv 3 

0 

C 21 

0 

0 

0 


0 

0 

0 

0 

_ 0 

0 

0 



_0 

0 

0 

0_ 


(52) 


Ao — 


0 

ct ai 

0.5pa a5 ??oo 

0 


da 3 V10 

0 

^oc^VOl 

0 

0 

0 

0 

0 

, An = 0.5p 

a qi 

dq 3 

Ciq 8 + dq Q ^ 00 

0 

-ay 2 

0 

0 

ay 2 


0 

0 

a v 3 ^00 

0 

0 

1 

0 

0 _ 


0 

0 

0 

o_ 


(53) 



0 

0 

0 

0 


0 

0 

0 

0 

A 0 2 = 0.5 p 

dq 1 dq 9 £l0 

0 

dq 9 £01 

0 

, >li2 = 0.5p 

0-5o gg ^2o 

0 

0 
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0 
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0 


av 3 n 20 

0 

0 
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0 

0 

0 
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0 

0 

0 

0_ 
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0 

0 
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0.5pa Q2 T O o 

0 

0 

0 

0 

a 97 
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0 

0 

0 

0 
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0 

0 

0 
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0 
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0 
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